AZ-800 Study Guide 2026
Everything you need to pass the AZ-800 exam in one place: the exam format, every topic to study, real practice questions with explanations, flashcards, and full-length practice tests. Free, no sign-up needed.
📋 AZ-800 Exam Format at a Glance
📚 AZ-800 Topics to Study (63)
✍️ Sample AZ-800 Questions & Answers
1. Which DNS record type would you create in Azure DNS to specify the mail servers responsible for accepting email for a domain?
MX (Mail Exchange) records direct email traffic to designated mail servers for a domain.
2. An Azure Firewall Policy is configured in a Virtual WAN secured hub. What is different about this deployment compared to a standard VNet hub deployment?
In a Virtual WAN secured hub, Azure Firewall Manager automatically manages routing so traffic flows through the firewall, unlike standard VNet deployments where UDRs must be manually configured.
3. In Azure Virtual WAN, what is the purpose of the 'defaultRouteTable' associated with each hub?
The defaultRouteTable is the standard routing table in a Virtual WAN hub where connections associate and propagate their routes by default.
4. You want to use Azure Private DNS Resolver to forward private endpoint DNS queries from on-premises to Azure. What must you deploy?
The Azure DNS Private Resolver inbound endpoint provides an IP in your VNet that on-premises DNS servers can forward queries to, which then resolve via Azure private DNS zones.
5. A VNet peering connection shows 'Initiated' status on one side but 'Connected' on the other. What does this indicate?
'Initiated' means only one side of the peering has been created; the administrator of the peer VNet must create the reciprocal peering link to reach 'Connected' state.
6. An ExpressRoute circuit uses the Premium add-on. How many VNets in the same geopolitical region can be linked to this circuit compared to Standard?
ExpressRoute Premium allows 10 to 100 VNet links depending on circuit bandwidth (10 Gbps = 100 VNets), while Standard allows up to 10 VNets.